Galaxy’s head of research said the exploitation of a Coldcard wallet vulnerability is spreading, with on-chain analysis pointing to at least 15 separate attackers. The team has confirmed three attack waves so far, while a fourth has not yet been verified. It also identified 15 smaller attack traces, labeled A through O.
According to the researcher, every attack activity after the first wave was discovered through victim reports. That has made attribution harder than in many traditional DeFi or centralized exchange hacks, where investigators can often follow a clearer fund flow. In this case, different attackers have used different transfer patterns, so researchers have had to combine information from victims with transaction behavior on-chain.
In the latest case uncovered by the team, a report from a victim who lost less than 1 BTC led researchers to identify an attack operation that stole about 12 BTC from 126 addresses. The team labeled that activity “Footprint O.”
Odaily reported that Galaxy’s head of research said attackers are continuing to exploit a vulnerability affecting Coldcard wallets, with on-chain monitoring indicating that at least 15 different attackers are involved.
The team has confirmed three attack waves so far. A fourth wave has been observed but has not yet been confirmed. Researchers also found 15 smaller attack traces, labeled A through O.
According to the researcher, all attack activity after the first wave was identified through reports from victims. Because different attackers used different fund transfer patterns, the team could not rely on fund tracking alone in the way investigators often do in traditional DeFi or centralized exchange hacking cases. Instead, researchers had to combine victim information with on-chain transaction patterns to identify the activity.
In the latest case identified, a victim report involving a loss of less than 1 BTC helped researchers uncover an attack operation that stole about 12 BTC from 126 addresses. The team labeled that activity "Footprint O."
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
